CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

270 matches found

Rapid7 Vulnerability Database (full)•added 2026/04/10 12:00 a.m.•7 views

CVE-2026-6006: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Patient Record Management System 1.0. The impacted element is an unknown function of the file /edithpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

6.5CVSS6.4AI score0.00316EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/04/10 12:00 a.m.•4 views

CVE-2026-6005: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is an unknown function of the file /hematologyprint.php. Executing a manipulation of the argument hemid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS6.4AI score0.00316EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/04/09 12:00 a.m.•7 views

CVE-2026-5960: Exposure of Sensitive Information to an Unauthorized Actor

A weakness has been identified in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /db/hcpms.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The...

5.3CVSS5.1AI score0.00445EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/02/19 12:00 a.m.•7 views

CVE-2026-2706: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysisnot.php. This manipulation of the argument compid causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.5AI score0.00402EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2026/01/12 12:00 a.m.•7 views

CVE-2025-41003: Improper Neutralization of Input During Web Page Generation

Imaster's Patient Record Management System contains a stored Cross-Site Scripting XSS vulnerability in the endpoint ‘/projects/hospital/admin/editpatient.php’. By injecting a malicious script into the ‘firstname’ parameter, the JavaScript code is stored and executed every time a user accesses the...

5.1CVSS6.5AI score0.00273EPSS

SaveExploits0References1